
Security News
Attackers Are Hunting High-Impact Node.js Maintainers in a Coordinated Social Engineering Campaign
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.
isomorphic-fetch-improve
Advanced tools
Improvements over isomorphic-fetch.
npm i isomorphic-fetch-improve -S
const fetch = require('isomorphic-fetch-improve')
const url = 'http://localhost:3000/test'
fetch(url, {
timeout: 1000 * 30, // 30s
retryDelay: 1000, // 1s
retryMaxCount: 10, // total 11 times request
cancelableTaskName: 'task1',
auth: {user: 'admin', password: 'secret'}, // basic auth
method: 'get', // to upper case
// forceMethod: 'PATCH', // case sensitive
// ...
}).catch(err => {
if (err.message == 'timeout') {
// Request timeout
} else if (err.message == 'cancel') {
// This request was cancelled due to there is a new request
} else {
// Other
}
})
// Send a request by the same task name again
fetch(url || null, {
cancelableTaskName: 'task1',
})
timeout [Default: 0] Set timeout.
retryMaxCount [Default: Infinity] Set retry max count, when an error occurred, such as refresh, lock screen.
retryDelay [Default: 0] Set delay milliseconds when retry.
cancelableTaskName [Default: null] Set the task name, to avoid the response data is replaced by old request in the response period.
auth [Default: null] Set user and password for basic authentication (Apply to relative paths).
forceMethod [Default: null] Set an original value to the request method.
MIT
FAQs
Improvements over isomorphic-fetch.
We found that isomorphic-fetch-improve demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.